It's easy to picture the ASIC manufacturers mining with customers' equipment for as long as they can before shipping, but I don't think it's actually all that easy to pull off.

Getting caught would likely mean big fines or a PR nightmare. They would somehow have to hide it from the majority of employees so the secret doesn't get out.